How to add another secure url in web.xml?

hello i want to secure my web application i have two kind of users i have users and admin.each of them has each certificat users have permission to enter /users and admin have permission to enter /admins/ but i want also users to enter another folder which is /otheruserplace how can i add this in my web.xml file here is my code
http://pastebin.com/m3e13d3d9

Just add another url-pattern.
This has nothing to do with JSF however. More suitable place would have been the Servlets forum.

Similar Messages

How to add a new url link in a view of an existing webdynpro component?

How to add a new url link in a view of an existing webdynpro component?

hi ,
refer SAP online hep :
Implementing Enhancements in a View
http://help.sap.com/erp2005_ehp_04/helpdata/EN/46/233f2189f74f08e10000000a114a6b/frameset.htm
To enhance the layout of the view, you can create new UI elements. This procedure is no different u2013 from a technical viewpoint u2013 from creating UI elements in components themselves. All UI elements created within the enhancement implementation can then be processed as usual.
Enhancements means inserting user developments into SAP development objects at predefined positions.
The Enhancement Framework enables you to add functionality to standard SAP software without actually changing the original repository objects, and to organize these enhancements as effectively as possible.
refernce :
have a look at this article
How to Create Enhancement Implementation in Web Dynpro ABAP
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/700317da-bd79-2c10-368e-8f18bf5d8b81&overridelayout=true
as pointed correctly by Saurav in earlier thread
regards,
amit

How to add another Chapter Page for more then 6 chapters & add right arrow?

Hello,
I created a project via the Magic iDVD option and it worked great and added multiple chapter pages for more then 6 chapters. Now, I manually added a submeno off of main and added 6 chapters but I need multiple pages since I have 40 chapters... I can't figure out how to add another chapter page and create a RIGHT ARROW navigation button for the next pages...
I also looked at the map view and see that on the working pages there is page connected to page... I also cannot find a way to add a page connected vi map view...
I have searched the forum but none of the answers were clear on how to do this... any help would be appreciated...
Thanks! T.

Adding the submenu is easy...making the button for it a "right arrow" is not.
You can keep adding submenus to other submemus by navigating to the appropriate menu and then choose the "add submenu" command from the iDVD project menu. This can be done in either normal or map view.
However, this creates a "folder" button, (or other things in some themes) not a right arrow. I agree it should be a choice! My 2nd best solution is to chage the folder button to a "text only button" and label it "More Chapters > >"
Another solution (3rd best??) is to use command-shift-4 when you are one one of your other menus that DOES have a right arrow, and take a mini picture of the arrow. Then choose one of the oval menu buttons on the button pane, and drag this tiny picture onto the button. Re-size it to make it close to the same size as your other buttons. It will have a funny edge on it from the button style, but it will look like a right arrow.
John B

How to add WS Security Policy in OSB

Hi all,
How to add WS Security Policy in OSB tht has username and Password??
Thanks,
Kiran

http://docs.oracle.com/cd/E13159_01/osb/docs10gr3/security/ws_policy.html

Custom display template - how to add anothe display template for refimement item?

Custom display template - how to add anothe display template for refimement item?
I add a new filter_default_custom.html file and want to create new refinement item display template to point to it
keren tsur

Not 100% if I understood the question, but if you uploaded your template to the Master Gallery and the corresponding .js file has been created, you can open the refinement config panel and specify the result type you want to map to your custom template.
http://www.eliostruyf.com/part-1-create-first-search-refiner-control-template/
Kind Regards
Bjoern
http://www.sharepointviking.com
Twitter: Follow @bjoern_rapp

TS1368 my brother has an iphone and his details are on my computrer i have just purchased an iphone and now have all his stuff on my phone. ive created an apple id but i still dont know how to add another phone to the apple account! please help

my brother has an iphone and his details are on my computrer i have just purchased an iphone and now have all his stuff on my phone. ive created an apple id but i still dont know how to add another phone to the apple account! please help

when you open the app store scroll down to the bottom it will display the apple id currently in use, change it to your normal apple id email

Wrong security configuration in web.xml

Hi all
I am developing an application with JDeveloper 10.1.3.3 using ADF-BC/JSF. I have followed the example of SRDemo and my .jspx files are located in two folders : public_html/app and public_html/pricelist/
My application will have two user roles. The administrators who access everything and the users that need to access only the pages located in faces/app and get access denied mesages in all pricelist management pages.
I have used file based security and defined users and roles in jaz-data.xml. I have also verified that the data in that file are correct using the isUserInRole() function.
What I cannot get to work correctly is the security in the web.xml since the way I have it both users and admins are granted full access to the faces/app/pricelist pages.
The security constrains on my web.xml look like this :
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>PricelistData</web-resource-name>
            <description> Price list management pages</description>
            <url-pattern>faces/app/pricelist/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>admin</role-name>
        </auth-constraint>
    </security-constraint>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>UserData</web-resource-name>
            <url-pattern>faces/app/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>user</role-name>
            <role-name>admin</role-name>
        </auth-constraint>
    </security-constraint>
    <login-config>
        <auth-method>BASIC</auth-method>
        <realm-name>jazn.com</realm-name>
    </login-config>
    <security-role>
        <role-name>user</role-name>
    </security-role>
    <security-role>
        <role-name>admin</role-name>
    </security-role>Can anyone tell me what am I doing wrong, or suggest anything else I should check ?
Thanassis

Well you're orion-application.xml file looks okay to me, and addition if the isUserInRole is returning proper values, it's hooked up correctly.
(By the way, a useful bean/free piece of code to do just what you're doing is the JSF-Security scope as written by Duncan Mills on Sourceforge)
As such I'd be looking at the security constraints URLs. You haven't by chance changed the url-pattern for the Faces Servlet? The default is this:
<servlet-mapping>
    <servlet-name>Faces Servlet</servlet-name>
    <url-pattern>/faces/*</url-pattern>
</servlet-mapping>...and your url-patterns assumes it starts with faces. Note it is correct in your url-patten to not include a forward slash before faces in the security constraint.
Another thing that springs to mind, when you navigate to the protected page through your menu structure, what URL do you see in the browser? Is it the URL of the page you came from, or the URL of the page you navigated to ... and in addition ..... another thing to try is in your browser, rather than navigating through your menu structure, go straight to the URL of the page. Does the login page then show?
The reason I mention this is if you're using the default navigation style in JSF for JDev 10.1.3 (if memory serves me well, it's direct), the Servlet may not actually inforce your protected page navigation as the navigated-to page is never actually served by the Faces servlet to the JEE engine to enforce security. I think I had a b1tch about this issue in the following OTN Re: ER: JSF direct navigation ignores JAZN container based security. Could this be what you're hitting?
As such try changing the navigation type to redirect.
CM.

Need api for changing security role in web.xml !!

My requirement is to change the value of the deployment descriptor "security-role" (in web.xml) through an api and inturn to persist the new value in web.xml. Also I need to know if this change is automatically redeployed or an explicit redeployment is needed ? In that case how do I redeploy using an api call ?
I found a lot of apis related to roles like createRole, removeRole etc.. But there are no apis to change the name of the role and inturn persist in web.xml.
Do I need to provide any more information ? Let me know
Thanks,
Karthick

why and when do you change security-role? try to use ant task (perhaph you need xpath also). itÂ´s the better when you perform task about lifeÂ´s cycle of application.
please, describe your problem.
of course in you change web.xml you must restart the application.

How to add a internal dtd to my xml file

I am using the xml parser for PL/SQL, how can add a internal dtd to my xml file..
Thanks in advance...

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Jinyu Wang ([email protected]):
Sorry, there is not an API to set internal DTD.
But you can set external DTD by using:
PROCEDURE setDoctype(doc DOMDocument, root VARCHAR2,sysid VARCHAR2, pubid VARCHAR2)<HR></BLOCKQUOTE>
Thanks for your replay...
null

How to add "Prepare Data" from a web service to the form

Hello,
Can any one please advise on how to add the "Prepare Data" process from the existing web service and have the form to pre-populate the data from this "Prepare Data" process instead of using schema xsd. I heard that this is an alternative or may be a better way to pre-populate data in ES2/ES3 to avoiding creating a data source in Form Designer. I try to find a sample on Adobe site but could not find one, most of them are using schema.
Any guidance or URL to the sample would be helpful.
Thanks,
HD

Thanks

How to add an outside url link to a navagation button in Dreamweaver Cs5.5

How or can I add an outside url link to a navagation button in Dreamweaver Cs5.5. If I try the properties/link it says that the link is an html and not a css.....
Thank you

Linking is done in HTML, not CSS (with the exception of a link to a background picture)
So, if your navigation is a list, you'd have the following in your HTML:
<nav>
     <ul>
          <li><a href="index.html">Home</a></li>
          <li><a href="about.html">About</a></li>
          <li><a href="books.html">Books</a></li>
          <li><a href="http://www.myexternalwebsitelink.com/inboundfromotherwebsite.html">External Link</a></li>
          <li><a href="contact.php">Contact</a></li>
        </ul>
</nav>
Here, in the example above, I'm using the HTML5 <nav>, but that could be an HTML4 <div class="nav"> and you will see a link to an internal page on the same website server for Home, About, Books and Contact with "External Link" pointing to another website external to the one we're on.
Make sense?

Using security-constraint in web.xml; not recognizing url-pattern tag

I am creating a very simple jsp application within JDeveloper 10.1.3.1. I have 2 jsp files...a readData.jsp and a maintainData.jsp. I would like to deploy this application to Oracle Application Server 10.1.2.2. I would like to use Oracle Internet Directory with Single Sign on enabled. The deployment to OAS works fine. For the security, I would like an administrator user to get to both pages...and a user to only be able to see the readData.jsp. I used the security constraints on the properties of the web.xml file within JDeveloper. Here is my web.xml file:
<?xml version = '1.0' encoding = 'windows-1252'?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
<description>Empty web.xml file for Web Application</description>
<session-config>
<session-timeout>35</session-timeout>
</session-config>
<mime-mapping>
<extension>html</extension>
<mime-type>text/html</mime-type>
</mime-mapping>
<mime-mapping>
<extension>txt</extension>
<mime-type>text/plain</mime-type>
</mime-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>adm_full_access</web-resource-name>
<url-pattern>*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>adm_all</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>usr_access</web-resource-name>
<url-pattern>readData.jsp</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>usr_all</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
</login-config>
<security-role>
<role-name>usr_all</role-name>
</security-role>
<security-role>
<role-name>adm_all</role-name>
</security-role>
</web-app>
When I deploy to OAS I added an OID account to the adm_all role...this works fine I can log on as that user and get to both jsps. But, when I add my user to the usr_all role within OAS I try to log on to the app...I then enter my SSO username and password and I get Access Denied errors from my browser when trying to access either page. I am confused about the <url-pattern> tag...is that relative to a directory within my deployment? Most of the examples I have seen use servlets...so I was wondering if I can even use the <url-pattern> tag to restrict/allow access to individual jsps? If someone could point me to some documentation on this set-up I would appreciate it!
Thank you.

I was able to get this to work. By doing the following:
<security-constraint>
<web-resource-collection>
<web-resource-name>adm_full_access</web-resource-name>
<url-pattern>*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>adm_all</role-name>
</auth-constraint>
</security-constraint>
I was restricting access to all other groups by uisng <url-pattern>*</url-pattern>. Any other security-constraints set-up after that will not work. So saying * requires usr_all will restrict ALL webpages to ONLY adm_all, regardless of what future constraints say. So, my first security-constraints lists all directories or pages that every user can access. My next security-constraint then list resources that only my admins (adm_all) can acess. Any other security constraints then are set-up for each user role that I have...if adm_all should have access to these then the <role-name>adm_all</role-name> is added to each security constraint.

How to add another Planning Server to the Shared Connections?

Hi,
This is for version 11.1.2.1.103
Currently all of our users use Planning in Prod environment. I would like to open the UAT environment to a smaller set of users. UAT environment is in our Test environment. I couldn't figure it how to add the UAT environment to the current Prod Shared Connections. I was hoping it would be as easy as right click on the Prod Planning Server > click on Add > Add the UAT server > Click OK.
Instead I had to follow couple of steps to add the UAT environment to the SV:
1. SmartView > Options > Advanced > Edit Shared Connections URL with UAT environment URL > Click OK
2. Connect to Shared Connections > Planning
3. Right click on the Plan Type > Click on Add to Private Connections
4. Follow the same steps for the PROD Plan Type.
Now, I do have two environments under Private Connections and I do not need to follow the first step every time I want to switch between environments.
Was it a overkill or I did it right?
Thanks,
Mehmet
p.s. I just noticed that in Shared Connections, you can add another Essbase Server, but that's not an option for Planning.
Edited by: Mehmet Sevinc on May 8, 2012 2:48 PM

Hi Again,
following up my previous comment on this, you can create a macro and assign to an event or macro in the excel to change shared connection URL.
Declare Function HypSetSharedConnectionsURL Lib "HsAddin" (ByVal vtAPSURL As Variant) As Long
Sub SubHypSetSharedConnectionsURLTest()
Dim lRet As Long
lRet = HypSetSharedConnectionsURL("http://UATserver:19000/workspace/SmartViewProviders")
End Sub
http://docs.oracle.com/cd/E17236_01/epm.1112/sv_user/ch17s01s08s10.html
Hope this helps,
Ahmet

How to add a clickable url

Hi All,
Could someone please help me on how to add a clickable external link to a 'mixed char' field on a PeopleSoft page?
The link should be able to be entered in an instruction field on a page(by a super user) and then the same page should display that url as a clickable link for the end user. (I mean the url is not already embedded in the page for it to get displayed - which I know should be done on the field level setup in application designer)
I tried the html version with TEXT and the simple version of the url http://www.sitename but it shows up on the end page as a simple text and not as a web link.
Thanks!

Hello Hakan Biroglu,
Thanks a lot for your prompt reply! :)
I tried your suggestion, now the instruction field identifies the link but it is still not 'clickable' on the end user page, it shows up as a html text.
example:
If I type
Please answer the following question: http : // www. benefitoptions. az. gov
It shows up on the end user page as plain text:
"<"p> Please answer the following question:" "<"br" />" "<"a " "href"="http: //www. benefitoptions. az .gov">http :// www. benefitoptions. az. gov "<"/a">"</p">"
Could you please let me know how I can have this displayed as a clickable link? (I have added lots of " " for this page to show how it actually looks)
Thanks,
Priyamvadha
Edited by: Priyamvadha on Sep 10, 2012 11:46 AM

How to add EXPAND in url

Hi All,
I need your help:
I have a url as below to execute a query with a material filter, but somehow the web report does not expanded fully. So I want to add EXPAND cmd in this url string to forece it expand fully, but I don't know where to add and how to add Can soneone helps me?
http://pw1host.global.bdx.com:8164/sap/bw/bex?sap-language=20&CMD=LDOC&infocube=ZMDOOI019&query=ZM00_MM_DETAILS_FOSMOSIS&FILTER_IOBJNM_1=ZMDOOI019___F00001&FILTER_VALUE_1=000000000047130510&ZMDOOI019___F00001

Thanks in advance.
Jin Freda

How to add another secure url in web.xml?

Similar Messages

Maybe you are looking for